7.8

CVE-2026-72406

net: sungem: fix probe error cleanup

In the Linux kernel, the following vulnerability has been resolved:

net: sungem: fix probe error cleanup

gem_init_one() calls gem_remove_one() when register_netdev() fails.
gem_remove_one() unregisters and frees resources owned by the net_device,
including the DMA block, MMIO mapping, PCI regions, and the net_device
itself. gem_init_one() then falls through to its own cleanup labels and
frees the same resources again.

Keep the register_netdev() error path in gem_init_one(): clear drvdata so
PM/remove paths do not see a half-registered device, remove the NAPI
instance added during probe, and let the existing cleanup labels release
the resources once.

The issue was found by a local static-analysis checker for probe error
paths. The reported path was manually inspected before sending this fix.

Compile-tested with CONFIG_SUNGEM=y. Runtime testing was not performed
because no sungem hardware is available.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < f3bd60b26814b7c3c57c629abb0857dfc76d214a
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < f1d04fefb0c2a2de32d9cee22cdc2088be3758d1
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 331c99029a1cee1111f82f63d15b3cdebefbd341
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < a63eaf7605d1579cf3f551792e478cfaf5ac37d1
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < fb73cdc50b6755e5c3a80a195b2708a39ada0230
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < b15a3cc68e2450aa0edd94a74a7bdd45fcc17dd9
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < bc49e8746584564dba47d963d1916cc876fc6f6b
Status affected
Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2
Version < 36dea2f639249460d13f6ca66b2a9064187cd34d
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.12
Status affected
Version 0
Version < 2.6.12
Status unaffected
Version <= 5.10.*
Version 5.10.261
Status unaffected
Version <= 5.15.*
Version 5.15.212
Status unaffected
Version <= 6.1.*
Version 6.1.178
Status unaffected
Version <= 6.6.*
Version 6.6.145
Status unaffected
Version <= 6.12.*
Version 6.12.97
Status unaffected
Version <= 6.18.*
Version 6.18.40
Status unaffected
Version <= 7.1.*
Version 7.1.5
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.061
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/f3bd60b26814b7c3c57c629abb0857dfc76d214a
https://git.kernel.org/stable/c/f1d04fefb0c2a2de32d9cee22cdc2088be3758d1
https://git.kernel.org/stable/c/331c99029a1cee1111f82f63d15b3cdebefbd341
https://git.kernel.org/stable/c/a63eaf7605d1579cf3f551792e478cfaf5ac37d1
https://git.kernel.org/stable/c/fb73cdc50b6755e5c3a80a195b2708a39ada0230
https://git.kernel.org/stable/c/b15a3cc68e2450aa0edd94a74a7bdd45fcc17dd9
https://git.kernel.org/stable/c/bc49e8746584564dba47d963d1916cc876fc6f6b
https://git.kernel.org/stable/c/36dea2f639249460d13f6ca66b2a9064187cd34d